From f0eba6fb28be4b873bdab87073dd70deccc309f2 Mon Sep 17 00:00:00 2001 From: "Jonathan S. Katz" Date: Wed, 9 Aug 2017 08:17:52 -0400 Subject: [PATCH] Fixed typo --- update_releases/current/20170810securityrelease.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/update_releases/current/20170810securityrelease.md b/update_releases/current/20170810securityrelease.md index bcef526..2119e6a 100644 --- a/update_releases/current/20170810securityrelease.md +++ b/update_releases/current/20170810securityrelease.md @@ -90,7 +90,7 @@ For more details, please see the [release notes](https://www.postgresql.org/docs CVE-2017-7548: lo_put() function ignores ACLs -------------------------- -The lo_put() function should require the same permissions as lowwrite(), but there was a missing permission check which would allow any user to change the data in a large object. +The lo_put() function should require the same permissions as lowrite(), but there was a missing permission check which would allow any user to change the data in a large object. To fix this, the lo_put() function was changed to check the UPDATE privileges on the target object. -- 2.39.5